Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Feb 13 2008 08:33PM
Krzysztof Burghardt (krzysztof burghardt pl)
There is a bug in "Log" function of Search Unleashed by John Godley,
This plug-in stores search queries but does not validates stored data
and put them back "raw" to browser.
HTML and Java Script can be injected with search request:
[ more ]
Copyright 2010, SecurityFocus